1. Who is responsible for information
Cardiology Insights operates the neutral assessment, corporate website, secure patient-access technology, platform administration, support, account management, and business-development functions. For those activities, Cardiology Insights may determine why and how information is processed.
After you select a participating cardiovascular organization and authorize sharing, that medical organization receives the approved assessment, contact, verification, routing, and related information. The selected organization is responsible for medical care, clinical decisions, appointment handling, and its own privacy obligations. Depending on the deployment and agreement, Cardiology Insights may act as a service provider, processor, or business associate for that organization.
No medical practice receives a neutral assessment merely because you opened the site or completed an assessment. Practice sharing occurs only after an eligible practice is selected and you authorize the next step, except where disclosure is legally required or necessary for immediate security or safety.
2. Information we collect
Corporate and general website information
We may collect demonstration requests, support communications, professional contact information, business introductions, and ordinary technical information such as browser, session, security, and network data.
Assessment information
The cardiovascular assessment may collect age, sex, race used by an approved risk calculation when applicable, cholesterol, blood pressure, smoking, diabetes, related health history and risk information, symptoms, responses, question sequence, clinical-support ranking, urgency, and recommended type of care. Known cholesterol and blood-pressure values are optional; the adaptive assessment can continue when they are unavailable.
Contact and patient-access information
If you request follow-up, we may collect name, mobile number, email, ZIP code, verification status, insurance-plan selection, preferred location, authorization, secure-completion status, appointment information, contact attempts, task status, and outcome information.
Workforce and account information
For customer employees and clinicians, we may collect name, work contact information, role, organization and location scope, sign-in and audit activity, support-view events, task actions, approvals, and training or operational information.
Security and anti-abuse information
We may process protected network identifiers, session timing, duplicate indicators, verification attempts, rate limits, browser or device information, and anti-bot results. Assessment answers are not placed in ordinary page URLs or browser notification text.
3. Why information is used
- provide one adaptive educational cardiovascular assessment using relevant symptoms, risk factors, history, and optional known health numbers;
- apply emergency safety rules and identify a potentially appropriate urgency or type of care;
- match eligible individuals with an available participating practice;
- verify contact information and authorization;
- route, assign, acknowledge, contact, schedule, transfer, monitor, and close patient-access work;
- apply approved geography, payer, service-line, physician, and capacity rules;
- operate customer accounts, support, auditing, clinical governance, quality assurance, and security;
- measure privacy-safe campaign and operational outcomes without sending assessment content to advertising platforms;
- respond to privacy requests, disputes, legal obligations, and security incidents; and
- communicate with prospective customers and professional contacts.
5. Health-related and sensitive information
Cardiovascular assessment answers, symptoms, risk factors, clinical-support outputs, contact verification, insurance compatibility, and patient-access activity are treated as sensitive. They are used only for the assessment, authorized access workflow, safety, operations, support, quality, security, legal obligations, and customer-directed services described here.
Cardiology Insights does not use health-related assessment information to build advertising profiles or send identifiable patient activity to advertising platforms.
6. Adaptive assessment and automated support
The service uses versioned calculations, an adaptive clinical-support engine, safety rules, and routing logic. These tools provide educational information, urgency guidance, and operational recommendations. They do not make a definitive diagnosis, prescribe treatment, or make a final decision about whether a physician must accept or treat a patient.
Human staff at the participating organization review verified requests, make contact, and determine the final clinical, physician, location, and scheduling steps. Where applicable law gives a right to human review or to contest a significant automated decision, submit a request through the privacy-rights form.
7. Security and privacy controls
Controls include HTTPS, tenant separation, role-based access, session protection, mobile verification, audit trails, rate limiting, anti-bot checks, protected snapshots, controlled clinical releases, privacy-safe browser alerts, and secure random tokens for completion and family-sharing links. No security measure can eliminate every risk.
Do not send passwords, verification codes, identity documents, or detailed medical information through ordinary email. Use the secure privacy-rights form and follow the verification instructions provided after submission.
8. Retention
Information is retained only for as long as reasonably necessary for the purpose collected, customer instructions and agreements, healthcare and legal obligations, security, auditability, dispute resolution, and approved operational needs. The exact period depends on the information type and whether Cardiology Insights is acting for itself or for a participating medical organization.
Deletion or de-identification may be delayed or limited where information must be retained for security, legal obligations, a medical organization’s record responsibilities, fraud prevention, the establishment or defense of legal claims, or another permitted exception. Cardiology Insights maintains an internal retention register and is developing automated enforcement for approved schedules.
9. Your rights and choices
Depending on your location and the context, you may have rights to know, access, correct, delete, receive a portable copy, learn about disclosures, limit certain uses of sensitive information, withdraw consent, object or restrict processing, appeal a decision, or opt out of sale or sharing.
Submit a request through Your Privacy Rights. We may need to verify identity and authority before acting. We will route a request to the responsible participating organization when that organization controls the relevant patient or medical-practice information.
Questions may be sent to support@cardiology-insights.com. Material revisions will be posted with a new version and effective date.